<?xml version="1.0"?>

<!DOCTYPE owl [
	<!ENTITY rdf "http://www.w3.org/1999/02/22-rdf-syntax-ns#">
	<!ENTITY rdfs "http://www.w3.org/2000/01/rdf-schema#">
	<!ENTITY xsd "http://www.w3.org/2001/XMLSchema#">
	<!ENTITY owl "http://www.w3.org/2002/07/owl#">
	<!ENTITY cc "http://web.resource.org/cc/#">
	<!ENTITY project "http://ebiquity.umbc.edu/ontology/project.owl#">
	<!ENTITY person "http://ebiquity.umbc.edu/ontology/person.owl#">
	<!ENTITY pub "http://ebiquity.umbc.edu/ontology/publication.owl#">
	<!ENTITY assert "http://ebiquity.umbc.edu/ontology/assertion.owl#">
]>

<!--

This ontology document is licensed under the Creative Commons
Attribution License. To view a copy of this license, visit
http://creativecommons.org/licenses/by/2.0/ or send a letter to
Creative Commons, 559 Nathan Abbott Way, Stanford, California
94305, USA.

-->

<rdf:RDF 
		xmlns:rdf = "&rdf;"
		xmlns:rdfs = "&rdfs;"
		xmlns:xsd = "&xsd;"
		xmlns:owl = "&owl;"
		xmlns:cc = "&cc;"
		xmlns:project = "&project;"
		xmlns:person = "&person;"
		xmlns:pub = "&pub;"
		xmlns:assert = "&assert;">
	<pub:MastersThesis rdf:about="http://ebiquity.umbc.edu/paper/html/id/1023/Situation-Aware-Intrusion-Detection-Model">
		<rdfs:label><![CDATA[Situation Aware Intrusion Detection Model]]></rdfs:label>
		<pub:title><![CDATA[Situation Aware Intrusion Detection Model]]></pub:title>
		<pub:publishedOn rdf:datatype="&xsd;dateTime">2012-05-10T00:00:00-05:00</pub:publishedOn>
		<pub:abstract><![CDATA[Today, information technology and cyber services have become the foundation pillars of every business and manufacturing industry. The importance of cyber-services and their extensive use by every section of society has paved the way for cyber crimes like espionage, politically motivated attacks, credit card frauds, unauthorized infrastructure access, denial-of-service attacks, and stealing of valuable data. Intrusion Detection Systems (IDS) are applications that monitor cyber-systems to identify any malicious activities, generate an alert when such an activity is detected, and redress the problem if possible. Most of the intrusion detection/prevention systems available today are based on rule-based or signature-based activity monitoring, which detect threats and vulnerabilities by cross-referencing the threat or vulnerability signatures in their databases. These Intrusion Detection Systems (IDS) face limitations in detecting newly published attacks or variants of existing attacks. They are also point solutions that focus on a single system/component. We argue that integrating information from multiple data channels can lead to a better threat detection model. The data sources of the Web, including blogs, chat rooms, forums, etc., can be a good source of information for upcoming attacks or attacks whose signatures have not yet been tracked for the intrusion detection systems to catch. Semantic integration of the data sources from the web, information from IDS/IPS modules at the network and host level, and the expert knowledge can be used to create a 'Situation Aware Intrusion Detection Model', which can lead to better intrusion detection and prevention results. In this work, we present such a system that makes use of semantic web technologies to find relationships between the information gathered from the web, sensor data coming from IDS/IPS modules and network activity monitors, and reasons over this data and expert provided rules in order to detect the possibility of a cyber attack.]]></pub:abstract>
		<pub:counter>802</pub:counter>
		<pub:tag><![CDATA[cybersecurity]]></pub:tag>
		<pub:tag><![CDATA[intrusion detection]]></pub:tag>
		<pub:tag><![CDATA[semantic web]]></pub:tag>
		<pub:publisher><![CDATA[University of Maryland, Baltimore County]]></pub:publisher>
		<pub:author>
			<rdf:List>
				<rdf:first>
					<person:Person rdf:about="http://ebiquity.umbc.edu/person/html/Sumit/More"><person:name><![CDATA[Sumit More]]></person:name><rdfs:label><![CDATA[Sumit More]]></rdfs:label></person:Person>
				</rdf:first>
				<rdf:rest rdf:resource="&rdf;nil" />
			</rdf:List>
		</pub:author>
		<pub:firstAuthor>
<person:Person rdf:about="http://ebiquity.umbc.edu/person/html/Sumit/More"><person:name><![CDATA[Sumit More]]></person:name><rdfs:label><![CDATA[Sumit More]]></rdfs:label></person:Person>
		</pub:firstAuthor>
		<pub:softCopy><pub:SoftCopy>
			<pub:softCopyFormat><![CDATA[PDF Document]]></pub:softCopyFormat>
			<pub:softCopyURI><![CDATA[http://ebiquity.umbc.edu/get/a/publication/1143.pdf]]></pub:softCopyURI>
			<pub:softCopySize>654274</pub:softCopySize>
			</pub:SoftCopy>
			</pub:softCopy>
	</pub:MastersThesis>

<rdf:Description rdf:about="">
	<cc:License rdf:resource="http://creativecommons.org/licenses/by/2.0/" />
</rdf:Description>

</rdf:RDF>
